A penetration tester is assessing an NFC-based access control system. The tester wants to capture the communication between a legitimate NFC card and a reader to later replay or analyze the authentication exchange. Which tool and technique should the tester use?

A smartphone with an NFC tag-writing app

A Bluetooth scanner to detect NFC emissions

A Proxmark3 placed in relay mode between the card and reader

A software-defined radio tuned to 2.4 GHz

A mobile app developer is implementing a feature that allows two smartphones to exchange cryptographic keys by tapping them together. The app uses NFC in peer-to-peer mode. The developer is concerned about man-in-the-middle attacks during the key exchange. Which approach would best mitigate this risk?

Perform the key exchange over Bluetooth instead, since Bluetooth has built-in encryption.

Encrypt the NFC link with a pre-shared key that is hardcoded in the app.

Use the NFC Data Exchange Format (NDEF) to wrap the keys and rely on the short range of NFC to prevent interception.

Use a Diffie-Hellman key exchange over NFC and authenticate the derived key using a visual comparison of a hash on both screens.

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 3

NFC GAWN Practice Questions (Page 3)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

8concepts

Questions 11–15

11foundation · easy
Which type of NFC security threat involves an attacker intercepting the wireless communication between an NFC device and a tag?
Select an answer first
12expert · hard
A company is designing an NFC-based access control system for a high-security facility. They need to choose a tag type that supports strong encryption and mutual authentication, and they also need to store a digital certificate on the tag. The tag must be compatible with ISO/IEC 14443. Which tag type should they choose?
Select an answer first
13foundation · easy
Which NFC security threat involves an attacker placing a device between two legitimate NFC parties to intercept and forward data, potentially altering it?
Select an answer first
14application · medium
A penetration tester is assessing an NFC-based access control system. The tester wants to capture the communication between a legitimate NFC card and a reader to later replay or analyze the authentication exchange. Which tool and technique should the tester use?
Select an answer first
15application · medium
A mobile app developer is implementing a feature that allows two smartphones to exchange cryptographic keys by tapping them together. The app uses NFC in peer-to-peer mode. The developer is concerned about man-in-the-middle attacks during the key exchange. Which approach would best mitigate this risk?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

NFC GAWN Practice Questions (Page 3)

Questions 11–15

Which type of NFC security threat involves an attacker intercepting the wireless communication between an NFC device and a tag?

Which NFC security threat involves an attacker placing a device between two legitimate NFC parties to intercept and forward data, potentially altering it?

A penetration tester is assessing an NFC-based access control system. The tester wants to capture the communication between a legitimate NFC card and a reader to later replay or analyze the authentication exchange. Which tool and technique should the tester use?

Keep studying — RFID and NFC Attacks